News

The hardware crypto wallet provider Trezor reported a data breach affecting nearly 14,000 customers, which involved personal information being compromised through its third-party shipping provider, ShipMonk, rather than Trezor's own systems. The affected…

Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026, including a critical flaw (CVE-2025-41769) resulting in unauthenticated buffer overflow with a CVSS score of 9.8, allowing remote code execution. Other vulnerabilities…

Security researchers from Broadcom's Threat Hunter Team have identified the threat group Jewelbug, associated with Chinese cyber espionage, as a hack-for-hire entity involved in cryptocurrency fraud. Their report reveals that Jewelbug operates on shared…

On August 13, 2026, President Trump signed a national security memorandum authorizing vetted private cybersecurity firms to conduct government-sanctioned offensive cyber operations targeting transnational criminal networks. This program, overseen by the…

Threat actors are exploiting an unpatched zero-day vulnerability in GeoServer, identified as an SQL injection issue that may allow remote code execution. Disclosed by researcher q1uf3ng, the vulnerability affects the jsonArrayContains function, which…

A multi-stage malware known as AmnesiaStealer has been discovered targeting macOS users via a fake GitHub download page. This information stealer employs a three-stage infection chain involving a shell script that executes the payload to harvest user data…

The CISA has disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app, with the most severe being CVE-2026-68067, which has a critical CVSS score of 9.8. This vulnerability allows remote attackers to control user accounts by bypassing…

The ISC Stormcast for August 14th, 2026, is handled by Guy Bruneau. The current threat level is indicated as green. The page includes links for further information about classes taught by Dr. Johannes Ullrich, as well as various resources related to cyber…

TP-Link disclosed five vulnerabilities affecting ISP-managed networking devices, including routers and mesh systems. The major issues include authentication bypass and command injection, with CVSS scores reaching up to 8.7. None of these vulnerabilities have…

A recent security advisory reveals a local privilege escalation vulnerability in the Linux kernel RDMA/rxe driver, identified as CVE-2026-64582. A researcher has published proof-of-concept exploit code for this flaw, which stems from a use-after-free issue…

A critical vulnerability in VMware vCenter, identified as CVE-2026–59310, has been under active exploitation since early August, shortly after its disclosure on July 29. With a CVSS score of 9.8, the flaw allows remote attackers to execute arbitrary code…

On August 12, a total solar eclipse crossed Europe, marking the first such event in twenty years. Millions witnessed the eclipse, leading to significant decreases in internet traffic as people diverted their attention from devices to the sky. An analysis of…

The Trump administration is initiating a program that recruits private security firms to execute government-authorized cyber operations against overseas criminal organizations targeting U.S. entities. A National Security Presidential Memorandum outlines that…

The newsletter summarizes recent activities and research of DomainTools Investigations. Major highlights include: 1) An analysis of the decentralized pro-Iran hacktivist ecosystem, which combines various cyber groups for influence operations during…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Metabase, Windows, and Cisco Secure Firewall to its Known Exploited Vulnerabilities catalog. The vulnerabilities include: 1. **CVE-2026-20349**: A heap…

CloudSEK reported that Team PCP, a threat actor, exfiltrated 78,330 secrets from CI/CD pipelines of 2,186 organizations over five days in March 2026. This incident highlights the vulnerabilities in CI/CD systems as attackers can compromise a trusted…

A compromised AWS access key led to a cyber-attack on the CRM provider Beacon, affecting personal information of over 1500 UK charities. The key was publicly exposed during software development, allowing the attacker to download data, including sensitive…

Google Cloud plans to achieve its first major post-quantum security milestone by the end of 2027, focusing on mitigating risks associated with data that could be decrypted by future quantum computers. Their roadmap includes specific deadlines for improving…

In July 2026, twenty-one cybersecurity-related mergers and acquisitions (M&A) were announced, reflecting a trend in the industry. Significant deals include: 1) Bank of America's acquisition of MDSec Consulting to enhance its presence in the UK; 2) Barracuda's…

HPE Aruba Networking has addressed two critical security vulnerabilities (CVE-2026-63455 and CVE-2026-63456) in its EdgeConnect SD-WAN Orchestrator, both assigned a CVSS score of 9.8. These vulnerabilities allow unauthenticated remote attackers to bypass web…

A critical vulnerability in VMware's vCenter, identified as CVE-2026-59310, was publicly disclosed on July 29, 2026, and exploited within just five days. The flaw, rated CVSS 9.8, allows unauthenticated attackers to execute arbitrary code on compromised…

Apple has addressed a significant vulnerability tracked as CVE-2026-43723, which allowed a local application to gain root privileges through the mediaremoted service. This flaw has a CVSS score of 7.8 and affects multiple versions of iOS, iPadOS, tvOS,…

Cloudflare has launched Certificate Transparency Monitoring (CTM) for over 650,000 customer domains, providing alerts when new TLS certificates appear in public logs. Previously, alerts were noisy due to many routine renewals from Cloudflare's own issuances.…

The 'State of Ransomware Q2 2026' report by Check Point Research reveals a notable shift in ransomware dynamics, highlighting that while leading Ransomware-as-a-Service (RaaS) groups continue to dominate, the number of active groups has increased…

WordPress has released a patch for a high-severity vulnerability (CVE-2026-65640) that allows authenticated attackers to execute arbitrary code remotely, with a CVSS score of 8.8. This vulnerability, affecting installations using Imagick and Ghostscript, can…

A researcher discovered a zero-click vulnerability in Xiaomi's ShareMe file-sharing app, allowing attackers within Bluetooth LE range to send arbitrary files to a victim's phone without any user consent or notification. This flaw affects over 1 billion…

The White House has authorized federal law enforcement to collaborate with private firms in conducting offensive cyber operations against foreign threats. This initiative, outlined in National Security Presidential Memorandum (NSPM) signed by President…

Israel-based venture fund Team8 has raised $365 million, with $265 million allocated to its third fund and $100 million for further investments in promising startups. This brings Team8's total assets under management to nearly $2 billion since its inception…

A new Android malware, named "WindRelay," enables criminals to steal live card data via NFC (Near Field Communication) technology. Researchers from Group-IB reported that attackers can capture card data from an infected phone and relay it to a…

Fortinet has released patches for eight vulnerabilities in its products, including significant authentication issues in FortiWeb and FortiManager. The CVE-2026-26035 vulnerability in FortiWeb allows unauthenticated remote attackers to access the GUI/CLI…

The article discusses the **Jewelbug APT** group, a cybercriminal organization believed to be operating from China. This group engages in both state-sponsored cyber espionage and cryptocurrency theft using a single command-and-control panel. Their activities…